Veille CVE

Recherche « Interinfo DreamMaker »

7 CVE

Critique 1 Élevée 3 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Interinfo DreamMaker » ✕
  1. CVE-2026-85541 5.4 Moyenne

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability. Authenticated remote attackers can execute arbitrary JavaScript codes in user's browser via a malicious website.

  2. CVE-2026-85540 8.8 Élevée

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.

  3. CVE-2026-10075 5.3 Moyenne

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to read file names under arbitrary path by exploiting an Absolute Path Traversal vulnerability.

  4. CVE-2026-10074 4.9 Moyenne

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.

  5. CVE-2026-10073 7.5 Élevée

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files.

  6. CVE-2026-10072 7.2 Élevée

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

  7. CVE-2026-10071 9.8 Critique

    Interinfo DreamMaker

    DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.